Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: Kc+JFgXs3nD1cWXBD4jgQredMl2dKAvo/lS67BE/vOE=
Subject key identifier: BB:40:9B:87:5A:D8:16:1C:AA:68:5C:BD:1E:ED:12:F4:34:C4:FA:D8
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 019A7293B5B9476C75BF2B0E03D5D50E08AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 13B0
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: pcjNelu4rbnlNKmwXrrjqPKIvA/WbZdZKVBfg8cYBaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b5:b9:47:6c:75:bf:2b:0e:03:d5:d5:0e:08:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=bb409b875ad8161caa685cbd1eed12f434c4fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:2c:01:7f:7c:9f:31:c7:0d:53:a0:5e:d4:
25:49:4a:ed:92:8c:b1:d8:ac:81:4a:ac:e2:ac:bb:
34:61:e6:83:42:b4:20:76:03:f8:a2:71:45:ca:e1:
3a:1c:5e:f1:18:aa:95:31:a4:4c:d4:4e:99:ec:e8:
10:ce:4b:50:97:e2:3a:62:a6:6d:21:fb:d0:16:15:
bc:5b:44:20:79:c3:43:80:49:b4:9f:bd:eb:8a:76:
18:f8:20:66:50:4d:a8:03:17:cc:f8:4a:13:87:91:
e9:1b:63:e3:8a:06:8f:8c:b3:05:c6:76:e1:e5:20:
b0:54:27:ae:1d:62:fa:17:e5:cc:2f:b2:8e:14:43:
69:81:75:0b:b2:a4:47:25:7a:64:5c:51:e5:92:5d:
01:6e:91:ca:82:73:c6:39:ff:05:d8:ad:0b:10:78:
65:29:e2:48:c3:98:76:ad:ca:ff:94:50:c9:39:9a:
90:51:1e:7c:18:4e:28:f6:f9:01:4c:61:2b:e7:c2:
e3:34:5c:0b:6f:e2:96:9a:1c:0f:c6:2a:b5:72:da:
f7:a7:b3:27:0d:85:01:9f:b5:95:55:e4:2e:70:bf:
90:3d:2e:07:4c:65:28:60:ca:a2:8e:76:8e:7c:b5:
81:24:e8:a2:a9:fa:6c:77:64:23:0b:d6:34:30:68:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:9B:87:5A:D8:16:1C:AA:68:5C:BD:1E:ED:12:F4:34:C4:FA:D8
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:db:1f:db:81:34:45:12:59:cd:bc:09:28:5e:be:bd:b5:51:
1d:b8:57:9c:fb:25:bd:d3:a6:d5:72:30:46:74:8f:0d:1e:52:
16:33:0b:fc:cf:f8:36:d6:67:c4:64:a7:ff:c3:1d:bd:7d:83:
dd:01:e4:2c:fd:49:1a:e5:24:e1:ca:14:fe:85:1e:f0:cd:91:
dd:72:00:ac:aa:26:ea:0e:bb:2e:bb:f8:6e:7b:a3:4a:fe:b4:
5c:67:e9:0e:ca:9d:b9:29:59:fd:34:e5:00:da:32:27:ad:33:
ca:af:34:be:7e:4b:69:87:97:1f:4d:62:8d:10:8f:5a:1c:42:
44:af:27:27:98:54:1d:a7:05:03:72:d1:c5:82:bd:89:10:c8:
55:63:ee:f1:ee:81:b4:3f:36:ee:cc:0b:88:1a:78:9b:8b:1a:
b9:8f:67:b4:f9:6a:d9:bc:ea:bc:c0:55:24:3b:76:d9:3c:fc:
77:4c:d3:e4:37:ec:72:99:e6:df:16:35:21:67:9f:74:46:3b:
91:c3:cc:37:fc:d6:32:01:39:d1:0e:36:da:d8:44:73:a3:2a:
d6:b5:fa:de:f0:24:cf:3e:17:de:d0:89:6f:52:c5:e9:95:7f:
96:e6:f9:15:34:01:9d:2b:dd:ac:ae:c4:14:e4:17:d3:47:b4:
d7:97:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:34 2025 by rpki-client